High performance firewalls in MANETs

Proceedings - 2010 6th International Conference on Mobile Ad-hoc and Sensor Networks, MSN 2010

Volumn , Issue , 2010, Pages 154-160

  Zhao, Hang ^a   Bellovin, Steven M ^a  

^a Fu Foundation School of Engineering and Applied Science   (United States)

Author keywords

Firewall; MANETs; Policy routing; Security

Indexed keywords

AD HOC ROUTING PROTOCOL; BATTERY POWER; CONTROL TRAFFIC; FIREWALL; MANETS; MOBILE NODES; PACKET FORWARDING; POLICY ROUTING; ROUTE SELECTION; SECURITY; SIMULATED ENVIRONMENT; SIMULATION RESULT; SOURCE ADDRESS; UNWANTED PACKETS;

MOBILE AD HOC NETWORKS; ROUTING PROTOCOLS; SENSOR NETWORKS;

AD HOC NETWORKS;

EID: 79952550254     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MSN.2010.30     Document Type: Conference Paper

References (22)

1. "Bonnmotion, a mobility scenario generation and analysis tool."
2. "GloMoSim: Global mobile information systems simulation library."
3. F. Bai, N. Sadagopan, and A. Helmy, "IMPORTANT: A framework to systematically analyze the Impact of Mobility on Performance of RouTing protocols for Adhoc NeTworks," in Proc. of Infocom, 2003.
4. S. M. Bellovin, "Distributed firewalls," ;login:, pp. 39-47, November 1999.
5. B. Bloom, "Space/time trade-offs in hash coding with allowable errors," Communications of ACM, vol. 13, no. 7, pp. 422-426, July 1970.
6. T. Camp, J. Boleng, and V. Davies, "A Survey of Mobility Models for Ad Hoc Network Research," Wireless Communication and Mobile Computing: Special issue on Mobile Ad Hoc Networking: Research, Trends and Applications, vol. 2, no. 5, pp. 483-502, Sep. 2002. (Pubitemid 135713186)
7. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker, "Ethane: taking control of the enterprise," SIGCOMM Comput. Commun. Rev., vol. 37, no. 4, pp. 1-12, 2007. (Pubitemid 350239768)
8. M. Casado, T. Garfinkel, A. Akella, M. J. Freedman, D. Boneh, N. Mckeown, and S. Shenker, "Sane: A protection architecture for enterprise networks," in Usenix Security Symposium, 2006.
9. W. R. Cheswick, S. M. Bellovin, and A. D. Rubin, Firewalls and Internet Security; Repelling the Wily Hacker, 2nd ed. Reading, MA: Addison-Wesley, 2003. [Online]. Available: http://www.wilyhacker.com/
10. T. Clausen and P. Jacquet, "Optimized Link State Routing Protocol (OLSR)," Internet Engineering Task Force, RFC 3626, Oct. 2003.
11. X. Hong, M. Gerla, G. Pei, and C.-C. Chiang, "A Group Mobility Model for Ad Hoc Wireless Networks," Proc. of the ACM Int. Workshop on Modelling and Simulation of Wireless and Mobile Systems, 1999.
12. S. Kent, C. Lynn, J. Mikkelson, and K. Seo, "Secure border gateway protocol (S-BGP) - real world performance and deployment issues," in Proceedings of the IEEE Network and Distributed System Security Symposium, February 2000.
13. S. Kent, C. Lynn, and K. Seo, "Secure border gateway protocol (Secure-BGP)," IEEE Journal on Selected Areas in Communications, vol. 18, no. 4, pp. 582-592, April 2000.
14. G. Pei, M. Gerla, X. Hong, and C. chuan Chiang, "Wireless hierarchical routing protocol with group mobility," in Proceedings of the IEEE Wireless Communications and Networking Conference (WCNC), 1999.
15. C. Perkins, E. Belding-Royer, and S. Das, "Ad hoc On-Demand Distance Vector (AODV) Routing," Internet Engineering Task Force, RFC 3561.
16. C. Perkins, Ad hoc Networking. Addison-Wesley, 2001.
17. D. Raymond and S. Midkiff, "Denial-of-service in wireless sensor networks: Attacks and defenses," IEEE Pervasive Computing, vol. 7, no. 1, pp. 74-81, Jan-Mar 2008.
18. F. Ye, H. Luo, S. Lu, L. Zhang, and S. Member, "Statistical en-route filtering of injected false data in sensor networks," in INFOCOM, 2005.
19. H. Zhao and S. M. Bellovin, "Policy algebras for hybrid firewalls," Department of Computer Science, Columbia University, Tech. Rep. CUCS-017-07, March 2007.
20. -, "Source prefix filtering in ROFL," Department of Computer Science, Columbia University, Tech. Rep. CUCS-33-09, July 2009.
21. H. Zhao, C.-K. Chau, and S. M. Bellovin, "ROFL: Routing as the firewall layer," in New Security Paradigms Workshop, September 2008.
22. S. Zhu, S. Setia, S. Jajodia, and P. Ning, "An interleaved hop-by-hop authentication scheme for filtering of injected false data in sensor networks," in IEEE Symposium on Security and Privacy, 2004.